This signature file may be used to cryptographically verify file integrity,
like this::

    $ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 0xA16EB94D
    $ gpg --list-keys 0xA16EB94D
      pub   2048R/A16EB94D 2008-08-15 [expires: 2023-08-12]
      uid   Turnkey Linux Release Key <release@turnkeylinux.com>

    $ gpg --verify debian-7-turnkey-canvas_13.0-1_amd64.tar.gz.sig
      gpg: Signature made Wed Oct 16 08:40:16 UTC 2013 using RSA key ID A16EB94D
      gpg: Good signature from "Turnkey Linux Release Key"

For your convenience we also include file checksums:

    * sha1sum  7c136c72e833328b4e0ec2106072803043546616
    * md5sum   6d4865c1a078a3929aa0578fdd8f4270

You can calculate these on your end and compare to check for errors, but
cryptographic verification is recommended for security reasons.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAABAgAGBQJSXlDbAAoJEIXCXpWhbrlNSz0H/3kKQ1Fxyk9kspVwdPqIu9Ff
xSfNxUUkq3JPpvk0qe0xlAthMisXzUYqviawFgQrhn9N9IhsndRdzBqjupiT/7UO
6toPh/Yf5wybQb2UFIswyDhiaLG1QYIgO0U90n2xHAvf0xyj5R0XuMSgthuc3tQT
Qx1LEYeh4/HZzxGZzhAmx11kGuFD5pIJ2yk6xNnL1jPE+yMD4rVVHyzD4eTNdD9v
xZndrAjBmL9R54KVH9G0R9BzXZ/5DWKgwDSIICdhL/WGDIHrrwwsmKNJr++YhtNG
zfGg7qXG3u1Ey2GARqTVakbQu0XSmqonsIS3hdz4ApkHsVmM3Y+2Zhz/8rUJb5w=
=nKBs
-----END PGP SIGNATURE-----